Password Protect XSS and SQL-Injection vulnerabilities.

CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerabilit...

Site News v 1.1 admin head error

+| Advisory 16. Site News v 1.1 admin head error Software: Site News v 1.1 Problem-Type: local Platforms: All Vulnerability: admin error Date: 29'Aug 2004 discovered by XSPYD3X -xspyd3xatinboxdotru- HTTP: www.lwb57.org IRC: irc.lwb57.org:6667 lwb +:| Exploit |: Messages are added by the usual use...

GLSA-200405-22 : Apache 1.3: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200405-22 Apache 1.3: Multiple vulnerabilities On 64-bit big-endian platforms, modaccess does not properly parse Allow/Deny rules using IP addresses without a netmask which could result in failure to match certain IP addresses...

ISS Protection Brief: Netscape NSS Library Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief August 23, 2004 Protection for Netscape NSS Library Remote Compromise Summary: A vulnerability exists in the Netscape Network Security Services NSS library suite which may result in remote compromise of products making...

GNU Mailutils 0.6 - Mail Email Header Buffer Overflow

GNU Mailutils 0.6 - Mail Email Header Buffer Overflow source: https://www.securityfocus.com/bid/13766/info GNU Mailutils mail is affected by an email header buffer overflow vulnerability. The problem exists in the 'headergetfieldname' function of the 'mailbox/header.c' source file and manifests...

CVE-2004-0542

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

[Full-Disclosure] iDEFENSE Security Advisory 08.03.04b: NGSEC StackDefender 2.0 Invalid Pointer Dereference Vulnerability

NGSEC StackDefender 2.0 Invalid Pointer Dereference Vulnerability iDEFENSE Security Advisory 08.03.04b www.idefense.com/application/poi/display?id=119&type=vulnerabilities August 3, 2004 I. BACKGROUND StackDefender is an IPS Intrusion Prevention System, for Win32 platforms, that will deny shellco...

Oracle9i Database - Default Library Directory Privilege Escalation

source: https://www.securityfocus.com/bid/10829/info Oracle database implementations are reportedly prone to a default library directory privilege escalation vulnerability. This issue arises due to a default configuration error that will permit the attacker to replace libraries required by setuid...

Linux Kernel: Multiple DoS and permission vulnerabilities

Background The Linux kernel is responsible for managing the core aspects of a GNU/Linux system, providing an interface for core system applications as well as providing the essential structure and capability to access hardware that is needed for a running system. Description The Linux kernel allo...

Apache integer overfow

MIME header length is unlimited, leading to possible memory exhaustion. On 64bit platforms integer overflow during MIME headers parsing requires sending of large amount of data...

multiple remote & local buffer overflows discovered in Drcatd

Zone-h Security Advisory Date of discovery : 24 june 2004 Date of release : 25 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : Drcatd Bugs : Buffer Overflows , Remote and local multiple Risk : low Platform : nix...

distcc -- incorrect parsing of IP access control rules

Fix bug that might cause IP-based access control rules not to be interpreted correctly on 64-bit platforms...

[Full-Disclosure] Code execution in the Unreal Engine through \secure\ packet

Luigi Auriemma Application: Unreal Engine http://unreal.epicgames.com Vulnerable games: - DeusEx = 1.112fm - Devastation = 390 - Mobile Forces = 20000 - Nerf Arena Blast = 1.2 - Postal 2 = 1337 - Rune = 107 - Tactical Ops = 3.4.0 - TNN Pro Hunter ? - Unreal 1 = 226f - Unreal II XMP = 7710 - Unrea...

EUVD-2004-0541

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

CVE-2004-0542

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

DOS@Orenosv

DOSOrenosvHTTPd.bat @echo on :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :Application: Orenosv Server :Vendors: http://home.comcast.net/makataoka/orenosv060.zip :Version: =0.6.0 :Platforms: Windows :Bug: D.O.S :Date: 2004-06-02 :Author: CoolICE :E-mail: CoolICEChina.com...

[Full-Disclosure] Orenosv HTTP/FTP Server Denial Of Service

SP Research Labs Advisory x13 ----------------------------- Orenosv HTTP/FTP Server Denial Of Service ----------------------------------------- Versions: orenosv059f Vendor: http://hp.vector.co.jp/authors/VA027031/orenosv/indexen.html Date Released - 5.25.2004 ------------------------------------...

[Full-Disclosure] CSA-200402-1: Previous Open Webmail vulnerability is exploitable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cycom AB Security Advisory CSA-200402-1 www.cycom.se Advisory: Previous Open Webmail vulnerability is exploitable Date: Sat Feb 21 15:18:21 CET 2004, updated: Thu May 6 10:37:29 CEST 2004 Application: Open Webmail 2.20, 2.21 and 2.30 and -current...

Qualcomm Eudora 5.2.16.x - Embedded Hyperlink Buffer Overrun

Qualcomm Eudora 5.2.16.x - Embedded Hyperlink Buffer Overrun source: https://www.securityfocus.com/bid/10298/info Qualcomm Eudora is reported to be prone to a remotely exploitable buffer overrun vulnerability. The issue is exposed when an excessively long hyperlink to a file resource is embedded ...